PT-2026-120552

CVE-2026-110355

Published

2026-10-21

Updated

2026-10-24

Description by

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Imperia CMS versions prior to 11.5.5

Description An unauthenticated Server-Side Template Injection (SSTI) exists when PHP is available. This allows remote code execution via the TEMPLATE parameter in SiteActive.

Recommendations Update to a version newer than 11.5.4. As a temporary workaround, restrict access to the TEMPLATE parameter in SiteActive.

Vendors

Affected products

Related identifiers

CVE-2026-110355

Found an issue in the description? Have something to add? Feel free to write us 👾

dbugs@ptsecurity.com